Rocky Linux 9.6 [TuxCare] Security Update: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791806541)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791806541 advisory. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages...

ROS-20261012-73-0258

The vulnerability of the sca3000probe function in the sca3000.c component of the Linux kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261012-73-0238

The vulnerability of the act8945acharger.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0252

The vulnerability of the bq25980charger.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0240

The vulnerability of the pinctrl-single.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: fetchmail

Issue Overview: A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM...

ROS-20261012-73-0166

The vulnerability of the drm/display/dpmst component in Linux kernel is related to an incorrect bit offset for a integer value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1626)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261626 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2023-27522, CVE-2025-49812, CVE-2025-23048,...

CentOS Linux 8 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS-STREAM8:CLSA-2026:1791461442)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1791461442 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different...

EulerOS 2.0 SP13 : util-linux (EulerOS-SA-2026-4203)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791741836)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791741836 advisory. - In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to erroneous iotlb entries In...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions CVE-2026-63858 In the Linux kernel, the following vulnerability has been resolved: net: serialize netifrunning check in enqueuetobacklog CVE-2026-724...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1635)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261635 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2024-12797. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ciqsa-2026_1634)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261634 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 31 CVEs: CVE-2023-0217, CVE-2022-3786, CVE-2024-4741,...

Rocky Linux 8.6 [CIQ] Security Update: avahi / avahi-autoipd / avahi-compat-howl / avahi-compat-howl-devel / etc Multiple Vulnerabilities (ciqsa-2026_1593)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261593 advisory. This advisory aggregates security fixes for the avahi SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2006-6870, CVE-2011-1002. Tenable has extracted the...

PT-2026-110480

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched cache group from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics sched cache stat lives in the mm structure. This ties the life cycle of scheduling stats with mm...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: rewind offset when NAT shrinks the packet CVE-2026-100070 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sockop...

Rocky Linux 9.2 [CIQ] Security Update: gnupg2 / gnupg2-smime Multiple Vulnerabilities (ciqsa-2026_1624)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261624 advisory. This advisory aggregates security fixes for the gnupg2 SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2022-34903, CVE-2014-4617, CVE-2006-6169,...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_77689)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202677689 advisory. kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel:...

Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_79281)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202679281 advisory. glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791 glibc: glibc: Process abort due to invalid memory in wordexp...